Privacy Notice

1. Who We Are

This Privacy Notice explains how personal data is collected and used by Pastry Masters Co. (“we”, “us”, “our”). The website is owned and operated by Confectionery Enterprises, confectionery artisans registered in Shrewsbury, Shropshire, United Kingdom. The name Pastry Masters Co. is used as a trading brand. We are the data controller for the purposes of UK data protection law.

2. Introduction

We are committed to protecting your privacy and handling personal data responsibly. This Privacy Notice explains:

what personal data we collect
how and why we use it
how we store and protect it
your legal rights

“Personal data” means information that can identify you directly or indirectly. “Processing” means collecting, using, storing, sharing, or deleting personal data.

This notice applies to data collected through:

our brand website
enquiry and trade contact forms
business communications
social media and third-party platforms where applicable

We do not sell personal data.

3. Personal Data We Collect

a) Data You Provide to Us

When you contact us, place a trade enquiry, or do business with us, we may collect:

name and job title
business name and address
email address and telephone number
order, enquiry, or correspondence details
marketing preferences

b) Data Collected Automatically

When you use our website, we may collect:

IP address
browser type and device information
pages visited and time spent on the site

This information is used for security, analytics, and website improvement.

c) Data from Third Parties

We may receive limited business-related data from:

payment providers
logistics partners
fraud prevention services
publicly available business registers

4. If You Do Not Provide Required Data

Where personal data is required to respond to an enquiry, fulfil a contract, or comply with legal obligations, and you do not provide it, we may be unable to proceed with the relevant service or transaction.

5. Legal Bases for Processing

Contractual necessity – to fulfil orders or trade agreements
Legitimate interests – to operate, manage, and protect our business
Legal obligation – to comply with tax, accounting, or regulatory requirements
Consent – where you have actively opted in (e.g. non-essential cookies)

Where consent is used, it may be withdrawn at any time via our Contact page.

6. How We Use Your Data

respond to trade enquiries
process and manage orders
communicate with customers and partners
improve our products, services, and website
prevent fraud and protect our legal rights

7. Sharing of Personal Data

We only share personal data where necessary, including with:

payment processors (e.g. PayPal)
delivery and logistics providers
professional advisers (legal, accounting)
fraud prevention and security services

All third parties are required to process data securely and lawfully.

8. Payment Information

We do not collect or store payment card details. Payments are processed securely by third-party payment providers. We do not have access to full payment information.

9. Cookies

Our website uses cookies to:

ensure core functionality
analyse site performance
remember user preferences

Non-essential cookies are only used with your consent. You may control or disable cookies through your browser settings.

10. Data Security

We use appropriate technical and organisational measures to protect personal data, including SSL encryption, secure hosting, and access controls.

11. Data Retention

We retain personal data only for as long as necessary to fulfil business purposes, meet legal obligations, or resolve disputes.

12. Your Rights

Under UK data protection law, you have the right to access your personal data, request correction or deletion, object to or restrict processing, and withdraw consent where applicable. Requests can be made via our Contact page. Identity verification may be required.

13. Complaints

If you have concerns about how we handle your personal data, please contact us via our Contact page. You also have the right to complain to the Information Commissioner’s Office (ICO).

14. International Transfers

Our website is hosted in the UK. Where data is processed outside the UK, appropriate safeguards are used to ensure lawful protection.

15. Children

Our website and services are intended for business users. We do not knowingly collect data from children.

16. Updates to This Privacy Notice

We may update this Privacy Notice from time to time. The current version will always be published on this website.

Product Website | Privacy Notice